$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b/9a06a01f-898f-3d8b-8e52-5e8c1628c1a0.roa File: 9a06a01f-898f-3d8b-8e52-5e8c1628c1a0.roa (raw, json) Hash identifier: ExdTjW+2PNdOFGhQO5GqPNnKY4XTFKRVqs32DBTRl+8= Subject key identifier: E5:47:A6:89:2E:02:56:7B:15:03:06:50:81:72:67:27:C4:E7:CF:F3 Certificate issuer: /CN=cd2e63d2-d07f-4959-8fde-569fd1767d7b Certificate serial: 010D0C9F4328584EC7A1E90086419725D876CE00 Authority key identifier: 44:1C:55:7C:61:E2:E7:B1:7E:68:1D:03:FC:47:39:9A:F5:A7:12:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b/9a06a01f-898f-3d8b-8e52-5e8c1628c1a0.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 26042 IP address blocks: 23.142.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b/cd2e63d2-d07f-4959-8fde-569fd1767d7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b/cd2e63d2-d07f-4959-8fde-569fd1767d7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:e9:00:86:41:97:25:d8:76:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd2e63d2-d07f-4959-8fde-569fd1767d7b Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=6670a978-de94-45f4-9ec2-ec07cfa0fc8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ac:15:74:14:c3:12:c6:b3:95:1b:8f:6a:27: c1:ba:d1:09:16:bc:46:70:29:b6:a3:9f:2a:bc:00: b1:7c:18:f6:0c:af:25:3d:7c:3c:34:50:8c:37:59: b9:ab:26:79:6c:51:48:08:42:a1:53:05:db:f7:ef: f0:70:9b:80:c4:21:7b:ea:66:77:d8:6a:34:6d:89: 02:c2:75:1a:40:9a:67:ee:cd:81:5c:77:8a:3a:bb: e1:9e:04:b2:b1:dc:5d:89:c9:54:04:7a:66:65:b5: 6c:e7:17:1d:ac:bc:b2:2c:87:9a:d3:fe:33:5d:59: 70:03:00:a7:c1:41:f0:62:74:7b:92:f1:a0:00:9a: 4b:3f:a9:d1:e1:ed:60:7f:8d:59:88:e0:f8:18:2a: 33:db:0e:3d:32:4a:48:d4:8d:e4:e5:35:35:3e:d2: cc:f4:e1:9d:cc:e5:6c:4a:6f:b4:af:7e:4d:bd:f0: 72:f0:9d:eb:c8:c4:7b:ab:34:a3:db:8f:25:54:b8: 23:c0:4a:00:a7:c3:88:fc:61:66:43:c9:34:21:84: 83:2e:1e:97:08:f5:8c:5f:71:45:37:5f:22:a2:23: 78:b6:29:9c:51:c8:3c:f2:69:d3:1e:20:50:64:17: 24:28:6d:dc:f9:d1:32:8a:27:19:2e:71:fb:47:94: 39:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:47:A6:89:2E:02:56:7B:15:03:06:50:81:72:67:27:C4:E7:CF:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b/9a06a01f-898f-3d8b-8e52-5e8c1628c1a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b/cd2e63d2-d07f-4959-8fde-569fd1767d7b.crl X509v3 Authority Key Identifier: keyid:44:1C:55:7C:61:E2:E7:B1:7E:68:1D:03:FC:47:39:9A:F5:A7:12:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b.cer sbgp-ipAddrBlock: critical IPv4: 23.142.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:6f:2f:fa:76:b1:73:35:ac:c9:ec:a3:a5:3f:e8:81:62:27: fa:43:8d:4b:bf:de:b8:66:fb:5b:20:c5:70:3f:94:fc:bc:0b: 3a:86:f7:0e:70:7a:46:40:88:79:97:f3:db:eb:e3:e5:71:63: 4c:de:b2:07:23:d5:0a:0d:16:61:6a:fe:95:72:ef:79:e8:82: ca:16:e6:4e:df:e1:6c:4e:8e:a8:4c:10:74:ec:51:ac:2b:e8: 29:91:88:db:0f:86:a3:45:49:bc:fd:e0:59:b0:bb:2e:c1:ab: 72:db:40:31:eb:d1:8e:1a:69:24:2c:eb:29:30:d7:eb:ae:04: 52:07:db:10:2f:c4:30:1c:5f:a7:3f:e2:45:2f:06:4e:94:7b: 28:ce:8e:8c:95:50:07:d1:48:2e:eb:c6:f3:3b:c3:2d:30:99: 7d:b9:08:14:7d:50:b0:e8:8d:29:00:76:73:4a:82:15:67:c2: ea:32:a9:34:cf:e7:28:8c:70:1f:52:c3:55:5a:c3:fe:db:d8: cb:3e:a9:e7:1c:89:bb:35:d8:2d:23:81:0b:f8:79:8a:4a:5c: f2:09:9d:e8:ed:88:97:28:80:bf:43:52:41:b4:9f:8e:8d:92: 0b:ae:22:61:49:87:a5:4c:0a:88:c7:0e:6e:25:b8:82:e7:c0: 48:47:e8:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HoekAhkGXJdh2zgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QyZTYzZDItZDA3Zi00OTU5LThmZGUtNTY5ZmQxNzY3 ZDdiMB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk NjY3MGE5NzgtZGU5NC00NWY0LTllYzItZWMwN2NmYTBmYzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6wVdBTDEsazlRuPaifButEJFrxGcCm2o58q vACxfBj2DK8lPXw8NFCMN1m5qyZ5bFFICEKhUwXb9+/wcJuAxCF76mZ32Go0bYkC wnUaQJpn7s2BXHeKOrvhngSysdxdiclUBHpmZbVs5xcdrLyyLIea0/4zXVlwAwCn wUHwYnR7kvGgAJpLP6nR4e1gf41ZiOD4GCoz2w49MkpI1I3k5TU1PtLM9OGdzOVs Sm+0r35NvfBy8J3ryMR7qzSj248lVLgjwEoAp8OI/GFmQ8k0IYSDLh6XCPWMX3FF N18ioiN4timcUcg88mnTHiBQZBckKG3c+dEyiicZLnH7R5Q5OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVHpokuAlZ7FQMGUIFyZyfE58/zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jZDJl NjNkMi1kMDdmLTQ5NTktOGZkZS01NjlmZDE3NjdkN2IvOWEwNmEwMWYtODk4Zi0z ZDhiLThlNTItNWU4YzE2MjhjMWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2QyZTYzZDItZDA3Zi00OTU5LThm ZGUtNTY5ZmQxNzY3ZDdiL2NkMmU2M2QyLWQwN2YtNDk1OS04ZmRlLTU2OWZkMTc2 N2Q3Yi5jcmwwHwYDVR0jBBgwFoAURBxVfGHi57F+aB0D/Ec5mvWnEh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jZDJlNjNkMi1kMDdmLTQ5NTktOGZkZS01Njlm ZDE3NjdkN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF47MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZvL/p2sXM1rMnso6U/6IFiJ/pDjUu/3rhm+1sgxXA/lPy8CzqG9w5w ekZAiHmX89vr4+VxY0zesgcj1QoNFmFq/pVy73nogsoW5k7f4WxOjqhMEHTsUawr 6CmRiNsPhqNFSbz94Fmwuy7Bq3LbQDHr0Y4aaSQs6ykw1+uuBFIH2xAvxDAcX6c/ 4kUvBk6UeyjOjoyVUAfRSC7rxvM7wy0wmX25CBR9ULDojSkAdnNKghVnwuoyqTTP 5yiMcB9Sw1Vaw/7b2Ms+qeccibs12C0jgQv4eYpKXPIJnejtiJcogL9DUkG0n46N kguuImFJh6VMCojHDm4luILnwEhH6CY= -----END CERTIFICATE-----Generated at Fri Sep 11 02:50:45 2026 by rpki-client